US and EU Agencies Warn Refrigeration Hacks Have Reached Blood Banks
November 6, 2026
FBI, CISA and EU agencies warn that attacks on refrigeration controllers have spread from European supermarkets to French blood service
Cybersecurity
US and EU Agencies Warn Refrigeration Hacks Have Reached Blood Banks
FBI, CISA and EU agencies warn that attacks on refrigeration controllers have spread from European supermarkets to French blood service sites, advisories say.
OpenSSH 10.6p2 Fixes ‘*sshole’ Password Bypass on Alpine, musl
OpenSSH 10.6p2 fixes a critical flaw that lets attackers log in to passwordless accounts on musl-based Linux such as Alpine by sending an overlong password.
Ransomware Disrupts Queens Public Library Across All 66 Branches
A ransomware attack encrypted Queens Public Library systems, knocking out Wi-Fi, computers, the website and app across 66 branches in New York City.
Norad Confirms Hackers Stole Data on All 20,614 Grants Portal Users
Norway's aid agency Norad says attackers stole names and emails of all 20,614 Grants Portal users across 12,511 organizations after abusing 27 accounts.
White House Network Addresses Found Acting as Residential Proxy Exits
Layer3 Intel says six White House network addresses relayed residential proxy traffic 236 times in a month, likely from a device running proxy software.
Microsoft Patches Paint Remote Code Execution Flaw CVE-2026-83844
Microsoft fixed CVE-2026-83844, an out-of-bounds read in Paint on Windows 10 and 11 rated CVSS 8.1, with no exploitation or public exploit code reported.
Apache OFBiz 24.09.08 Fixes 46 Flaws, Including Unauthenticated RCE
Apache OFBiz 24.09.08 fixes 46 vulnerabilities, including CVE-2026-83542, a CVSS 9.8 unauthenticated remote code execution flaw in the ERP platform.
GhostMap Android Bug Traps Phones in Boot Loop; Google Won’t Fix
Bitdefender disclosed GhostMap, an Android 10+ flaw that lets a permissionless app trap phones in an endless crash loop; Google has declined to issue a ...
Check Point: ChatGPT HTML Preview Flaw Bypassed Lockdown Mode
Check Point Research says a patched ChatGPT HTML preview flaw escaped the sandbox and bypassed Lockdown Mode, enabling silent chat theft via custom GPTs.
Treasury Sanctions 4 People, 41 Firms in Third Prince Group Round
The US Treasury sanctioned four people and 41 companies tied to Cambodia's Prince Group scam network in a third round aimed at money-laundering shell firms.
OpenSSH 10.6p2 Fixes ‘*sshole’ Password Bypass on Alpine, musl
November 6, 2026
OpenSSH 10.6p2 fixes a critical flaw that lets attackers log in to passwordless accounts on musl-based Linux such as Alpine
Ransomware Disrupts Queens Public Library Across All 66 Branches
November 6, 2026
A ransomware attack encrypted Queens Public Library systems, knocking out Wi-Fi, computers, the website and app across 66 branches in
Norad Confirms Hackers Stole Data on All 20,614 Grants Portal Users
November 6, 2026
Norway’s aid agency Norad says attackers stole names and emails of all 20,614 Grants Portal users across 12,511 organizations after
White House Network Addresses Found Acting as Residential Proxy Exits
November 6, 2026
Layer3 Intel says six White House network addresses relayed residential proxy traffic 236 times in a month, likely from a
Microsoft Patches Paint Remote Code Execution Flaw CVE-2026-83844
November 6, 2026
Microsoft fixed CVE-2026-83844, an out-of-bounds read in Paint on Windows 10 and 11 rated CVSS 8.1, with no exploitation or
Apache OFBiz 24.09.08 Fixes 46 Flaws, Including Unauthenticated RCE
November 6, 2026
Apache OFBiz 24.09.08 fixes 46 vulnerabilities, including CVE-2026-83542, a CVSS 9.8 unauthenticated remote code execution flaw in the ERP platform.
GhostMap Android Bug Traps Phones in Boot Loop; Google Won’t Fix
November 6, 2026
Bitdefender disclosed GhostMap, an Android 10+ flaw that lets a permissionless app trap phones in an endless crash loop; Google
Check Point: ChatGPT HTML Preview Flaw Bypassed Lockdown Mode
November 6, 2026
Check Point Research says a patched ChatGPT HTML preview flaw escaped the sandbox and bypassed Lockdown Mode, enabling silent chat
Treasury Sanctions 4 People, 41 Firms in Third Prince Group Round
November 6, 2026
The US Treasury sanctioned four people and 41 companies tied to Cambodia’s Prince Group scam network in a third round
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.